SNB Data Privacy Notice
Saudi National Bank (“SNB", “SNB AlAhli", “Bank", “We", “Us" or “Our") is committed to protecting your privacy and your Personal Data and offering the highest Data Protection standards, therefore provisions in SNB's Privacy Notice reflect appropriate requirement by the KSA Personal Data Protection Law. Personal data means data which relates to an individual who can be identified directly or indirectly from that data. The definition includes a wide range of personal identifiers that constitute Personal Data, including e.g., your name, your address, your photo, etc.
The purpose of this Notice aims to help you, the Customer, to understand what personal data we collect, use, store, share or process during and after your interaction with us to offer you more personalized products and services, and the legal bases on which we do so. Further, this Notice explains the various measures we have in place to protect the security of your personal data and minimize the potential for its unauthorized use, disclosure or destruction.
3. Your personal data
We collect and use your personal data to the extent necessary and to achieve a high standard of personalized products and services. We may collect various types of personal data such as but not limited to identification information, contact details, education and employment history, marital status, digital activity, financial information, sensitive data, etc., through various channels (e.g. website, mobile application, phone conversations, emails, chats, device IDs, IPs, etc.) The personal data collected may be used for purposes such as providing products and services, performing market research, improving your experience, preventing unauthorized activities, enhancing security and improving IT performance, managing complaints, performing contracts, complying with the law, etc. In circumstances where we rely on consent as the lawful basis for our processing (please refer to section 4), we will provide you with full details of the information that we will require and the reason for this. E.g., to provide a service, such as opening a bank account. This will allow you to carefully consider whether you wish to consent to the processing of your personal data. Where we require your consent to use and / or share your personal data, you have the right to refuse to provide us with such consent (based on your rights in section 8). If you do refuse to provide us with your consent (where applicable) to use and / or share your personal data due to regulatory restrictions we may not be able to provide you with the products or services for which your consent is being requested.
4. Lawful Basis
We will only collect and use your personal data in accordance with the KSA Personal Data Protection Law. In most cases, our lawful reasons will be:
Processing based on consent;
Processing achieves a definite interest for the data owner, and it is impossible or difficult to contact him;
Processing is in accordance with another law or in implementation of an earlier agreement to which the personal data owner is a party; or
If the controlling entity is a public entity, and such processing is required for security purposes or to meet judicial requirements.
5. Personal data sharing and transfer
We may share your personal data with internal parties (e.g., SNB entities) and external parties (e.g., regulatory authority, service providers, third parties, etc.) for processing to the extent necessary to fulfil the purposes described in this Notice. In some circumstances where the law permits, this will involve us transferring your personal data outside the Kingdom of Saudi Arabia (KSA). Such transfers will be performed in compliance with the law. When we transfer your personal information outside the region, we will take the necessary steps to ensure appropriate safeguards are applied to maintain the same levels of protection as required under the law.
6. Data Security
We have put in place appropriate security measures to:
Prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed (e.g., access control, network security, communication security etc.)
Deal with any suspected personal data breach and will notify you and the Competent Authority of the breach where we are legally required to do so based on the requirements outlined in the law.
We will retain your personal data for the period required by the law or any other period necessary for us to meet our operational obligations such as maintaining accounts, facilitating client relationship management, responding to legal claims or regulatory requests, etc. If you would like further information on retention please contact us via email@example.com. under section 13 below.
8. Your rights
Under certain circumstances, you may have different rights in relation to the personal data we hold about you. Please see the summary of your rights below:
For more information about your rights please refer to our data owner Rights Policy. If you have any concerns or wish to exercise any of the rights set out above, please contact us via firstname.lastname@example.org.
9. Social Media
SNB operates channels, pages and accounts on social media sites to be able to inform, assist and engage with you in order to improve our products and services. Please do not share any personal information on our social media sites, if you wish to communicate with us please contact us via email@example.com. SNB shall not be responsible for any information posted on those sites other than the information posted by its employees on its behalf.
10. Marketing from Us
We may use your personal data for marketing purposes to inform you about our products and services based on the consent provided. You may ask us to stop sending the marketing messages by following the opt-out links on any marketing message sent to you or by contacting the SNB Customer Care department (+ 966 92000 1000 / firstname.lastname@example.org) or the IPO team (email@example.com) at any time. When you opt-out of receiving these marketing messages, you will no longer receive them.
11. Your use of our website
We use 'cookies' to monitor how people use our website 'www.alahli.com'. A cookie is a piece of information that is stored on your computer's hard drive and it records how you have used a website. This helps us to understand how our customers use our website so we can develop and improve it. For more information, please contact us via firstname.lastname@example.org.
12. Review and updates
This Privacy Notice may be subject to periodic updates. The updates can be viewed through the last update date on the website.
13. Contact Us
Keeping your personal data accurate and up to date is very important for us. Please keep us informed of any of the information we hold about your changes during your relationship with us. If you have any questions about the Privacy Notice or require further information, please contact the IPO team via email@example.com. If you wish to get in contact with our Data Protection Officer (“DPO") directly, please include Data Protection Officer and/or DPO in the subject line.
The Saudi National Bank | A Saudi Joint Stock Company | Paid-up Capital SAR 60,000,000,000 | VAT Number 300002471110003 | C.R. 4030001588 | Under the supervision and control of The Saudi Central Bank | Licensed pursuant to Royal Decree No. 3737 issued on 20/4/1373H (corresponding to 26/12/1953G) | Head Office The Saudi National Bank Tower King Abdullah Financial District King Fahd Road | 3208 - Al Aqeeq District | Unit No. 778 | Riyadh 13519 – 6676 | 920001000 | www.alahli.com